CVEs-PoC/2018/CVE-2018-11396.md

CVE-2018-11396

Description

ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that triggers access to a NULL URL, as demonstrated by a crafted window.open call.

POC

Reference

• https://bugzilla.gnome.org/show_bug.cgi?id=795740

Github

• https://github.com/RootUp/BFuzz